Chief Security Officer

About the role

We are looking for a Chief Security Officer to lead the security function of Coins, the leading crypto brand in the Philippines. The CSO will define and execute a comprehensive security strategy across digital currency exchange, payment services and global operations, safeguarding user trust and regulatory compliance.

Key responsibilities

• Develop and maintain short‑term and long‑term security strategy, roadmap and risk appetite aligned with business goals and global regulations.
• Establish security governance, policies, standards and procedures; conduct regular risk assessments, audits and compliance reviews, reporting to the CEO and board.
• Lead the Security Operations Center (SOC) to provide real‑time monitoring, threat detection and incident response for cyber attacks, including phishing, DDoS, ransomware, data breaches and on‑chain threats.
• Build and operate cyber security controls covering network, application, endpoint, cloud and blockchain (wallet, on‑chain) environments.
• Promote security‑by‑design across product development, technology and business processes (Shift‑Left security).
• Drive security technology research and adoption such as AI‑driven threat intelligence, automated vulnerability scanning, penetration testing and SOAR automation.
• Protect core systems (trading, payment, wallet, user data) from vulnerabilities, data leaks and malicious activity.

Required profile

• Proven senior leadership experience in information security, preferably within fintech or cryptocurrency.
• Demonstrated ability to design and implement enterprise‑wide security strategies and governance frameworks.
• Strong track record of managing SOC operations and responding to high‑impact security incidents.
• Deep understanding of regulatory requirements related to virtual currency and electronic money.

Required skills

• Network security
• Application and endpoint security
• Cloud security
• Blockchain security (on‑chain, wallet)
• SOC management and real‑time threat monitoring
• Incident response and remediation
• Penetration testing and automated vulnerability scanning
• Security automation and orchestration (SOAR)
• AI‑driven threat intelligence analysis